dream
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local system tools to analyze project state. Specifically, it executes git log and git ls-files to determine modification history and uses Grep and Glob to verify if code artifacts referenced in memory still exist.
- [DATA_EXFILTRATION]: The skill accesses project data paths including ~/.claude/projects/ to manage session context files. While this involves reading metadata from the agent platform's internal storage, the skill performs no network operations or data transfers to external domains.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface.
- Ingestion points: Memory files are read and processed in Phases 1 and 2.
- Boundary markers: The instructions lack explicit delimiters or instructions to ignore embedded commands within the memory files.
- Capability inventory: The skill possesses the ability to read, write, and delete local files and execute system utilities.
- Sanitization: No content filtering or validation is performed on the data read from memory files before it is processed or merged.
Audit Metadata